12814 matches found
CVE-2023-39777
A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter...
CVE-2023-39777
A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter...
PT-2023-27103 · Vbulletin · Vbulletin
Name of the Vulnerable Software and Affected Versions: vBulletin versions 5.7.5 through 6.0.0 Description: A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin allows attackers to execute arbitrary web scripts or HTML via the "/login.php?do=login" url parameter...
CVE-2023-39777
CVE-2023-39777 is a documented XSS vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0, exploitable via the /login.php?do=login URL parameter. The issue is caused by a cross-site scripting flaw that allows an attacker to run arbitrary web scripts or HTML in the context of an aff...
CVE-2023-4766 SQLi in Movus Admin Panel
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Movus allows SQL Injection. This issue affects Movus: before 20230913...
CVE-2023-4766 SQLi in Movus Admin Panel
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Movus allows SQL Injection. This issue affects Movus: before 20230913...
KLA60566 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, obtain sensitive information, bypass security restrictions, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A denial of...
KLA60565 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Identity Linux Broker can be exploited remotely ...
Kylin CMS 1.3.0 SQL Injection
==================================================================================================================================== | Title : KylinCMS V1.3.0 Auth by pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.332-bit | |...
CVE-2023-4294
The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link...
Design/Logic Flaw
The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject malicious javascript that will trigger in the plugins admin panel with statistics of the created short link...
The vulnerability of the Google Maps API Super Store Finder software lies in its use of pre-installed credentials, allowing a hacker to gain access to the administration panel.
The vulnerability of the Google Maps API Super Store Finder integration tool is related to the use of pre-installed credentials. Exploiting this vulnerability could allow a malicious actor to gain access to the administration panel remotely...
The vulnerability of the Google Maps API Super Store Finder software lies in its lack of protection against SQL query structures, allowing attackers to gain access to the administration panel.
The vulnerability of the Google Maps API Super Store Finder integration tool is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to the administration panel...
PT-2023-28647 · WordPress · Url Shortify
Name of the Vulnerable Software and Affected Versions: URL Shortify WordPress plugin versions prior to 1.7.6 Description: The issue allows an unauthenticated attacker to inject malicious javascript that will trigger in the plugin's admin panel with statistics of the created short link, due to the...
CVE-2023-4528
Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 Windows, Linux, and MacOS permits an attacker to run arbitrary Java code including OS commands via its management interface...
9 Alarming Vulnerabilities Uncovered in SEL's Power Management Products
Nine security flaws have been disclosed in electric power management products made by Schweitzer Engineering Laboratories SEL. "The most severe of those nine vulnerabilities would allow a threat actor to facilitate remote code execution RCE on an engineering workstation," Nozomi Networks said in ...
CVE-2023-41508
A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...
CVE-2023-41508
A hard coded password in Super Store Finder v3.6 allows attackers to access the administration panel...
